Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10203
Critical
1875
CISA KEV
79
Public PoC
367

Most common types

  • Broken Access Control 1267
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

5 Oct Critical Other 18 Oct

Source: public CVE records (NVD, CISA KEV) · last published 18 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 536 of 681

  • 7.2 /10 High
    CVE-2026-83082 Auth required

    Oracle E-Business Suite Oracle Marketing - Remote Code Execution

    Oracle E-Business Suite Oracle Marketing 12.2.3-12.2.15 contains a remote code execution caused by an easily exploitable vulnerability in Audience component, letting high privileged attackers with network access via HTTP take over Oracle Marketing, exploit requires high privileges.

  • 8.0 /10 High
    CVE-2026-83081

    Oracle Financial Services Applications Oracle Banking Corporate Lending - Broken Access Control

    Oracle Financial Services Applications Oracle Banking Corporate Lending 14.5.0.0.0-14.9.0.0.0 contains a data tampering and information disclosure vulnerability caused by unauthorized access via physical communication segment, letting unauthenticated attackers create, delete, or modify critical data, exploit requires physical access to communication segment.

  • 7.1 /10 High
    CVE-2026-83080 Auth required

    Oracle Banking Branch - Authentication Bypass

    Oracle Banking Branch 14.5.0.0.0-14.9.0.0.0 contains an undefined vulnerability in Reports component, letting low privileged attackers with network access via HTTP and user interaction takeover the system.

  • 7.9 /10 High
    CVE-2026-83079 Auth required

    Oracle Siebel CRM - Broken Access Control

    Oracle Siebel CRM Cloud Applications 22.3-26.7 contains a broken access control vulnerability in Siebel Cloud Manager, letting high privileged attackers with logon compromise critical data integrity and confidentiality, exploit requires high privilege logon.

  • 8.2 /10 High
    CVE-2026-83078 No auth

    Oracle Siebel CRM - Broken Access Control

    Oracle Siebel CRM Cloud Applications 22.3-26.7 contains an unauthorized access vulnerability in Siebel Cloud Manager, letting unauthenticated attackers with HTTP network access compromise data confidentiality and integrity.

  • 7.5 /10 High
    CVE-2026-83075 No auth

    Oracle Siebel CRM - Authentication Bypass

    Oracle Siebel CRM Cloud Applications 22.3-26.7 contains an unauthorized access vulnerability caused by insufficient authentication in Siebel Cloud Manager, letting unauthenticated attackers with network access via HTTP access critical data, exploit requires network access.

  • 8.6 /10 High
    CVE-2026-83074

    Oracle Siebel CRM - Broken Access Control

    Oracle Siebel CRM Cloud Applications 22.3-26.7 contains an unauthorized access vulnerability caused by improper SSH access control in Siebel Cloud Manager, letting unauthenticated attackers with network access compromise critical data, exploit requires network SSH access.

  • 8.1 /10 High
    CVE-2026-83073

    Oracle Siebel CRM Siebel CRM Cloud Applications - Broken Access Control

    Oracle Siebel CRM Siebel CRM Cloud Applications 22.3-26.7 contains a broken access control vulnerability in Siebel Cloud Manager, letting unauthenticated attackers with physical network access create, delete, or modify critical data, exploit requires physical communication segment access.

  • 8.1 /10 High
    CVE-2026-83072 Auth required

    Oracle Applications Framework - Broken Access Control

    Oracle Applications Framework 12.2.3-12.2.15 contains a broken access control vulnerability caused by improper authorization in Search Bean component, letting low privileged attackers with network access via HTTP modify or access critical data.

  • 7.8 /10 High
    CVE-2026-83071 Auth required

    Oracle Business Intelligence Enterprise Edition - Remote Code Execution

    Oracle Business Intelligence Enterprise Edition 8.2.0.0.0 and 26.01.0.0.0 contains a remote code execution caused by a vulnerability in the Machine Learning component, letting low privileged attackers with logon to the infrastructure take over the system, exploit requires attacker to have logon access.

  • 7.7 /10 High
    CVE-2026-83070 Auth required

    Oracle PeopleSoft Enterprise PRTL Interaction Hub - Broken Access Control

    Oracle PeopleSoft Enterprise PRTL Interaction Hub 9.1 contains an unauthorized access vulnerability caused by insufficient access control in Enterprise Portal, letting low privileged attackers with network access via HTTP access critical data, exploit requires low privileged network access.

  • 8.8 /10 High
    CVE-2026-83069 Auth required

    Oracle Fusion Middleware Control - Authentication Bypass

    Oracle Fusion Middleware Control 12.2.1.4.0 and 14.1.2.0.0 contain a takeover vulnerability caused by an easily exploitable flaw in the Framework component, letting low privileged attackers with network access via HTTP fully compromise the system, exploit requires low privileged network access.

  • 7.7 /10 High
    CVE-2026-83068 Auth required

    Oracle Enterprise Manager for Oracle Database - Broken Access Control

    Oracle Enterprise Manager for Oracle Database 24.1 contains an information disclosure vulnerability caused by insufficient access control in the Core component, letting low privileged attackers with network HTTP access gain unauthorized access to critical data, exploit requires low privileged network access.

  • 8.1 /10 High
    CVE-2026-83067 Auth required

    Oracle JDeveloper - Broken Access Control

    Oracle JDeveloper 12.2.1.4.0 and 14.1.2.0.0 contain a broken access control vulnerability in ADF Shared Components, letting low privileged attackers with network access via HTTP modify critical data or cause denial of service.

  • 9.8 /10 Critical
    CVE-2026-83066 No auth

    Oracle Internet Directory - Remote Code Execution

    Oracle Internet Directory 12.2.1.4.0 and 14.1.2.1.0 contains a remote code execution caused by unauthenticated network access via T3 and IIOP protocols, letting unauthenticated attackers fully compromise the system, exploit requires network access.